ZDI-26-959: Docker Agent read_skill Missing Authorization Remote Code Execution Vulnerability

A remote code execution vulnerability exists in Docker Agent due to missing authorization in the read_skill functionality. Exploitation requires local attacker interaction, such as visiting a malicious page or opening a malicious file. The vulnerability has a high severity rating of 7.8 by ZDI.

• zerodayinitiative.com/advisories/ZDI-26-959/ (opens in a new tab)

• ZDI-26-954: llama.cpp MTMD Multimodal GGUF File Parsing Integer Overflow Remote Code Execution VulnerabilityHighVulnerability2026-11-13
• ZDI-26-955: KDE Gwenview PNG File Parsing Integer Overflow Remote Code Execution VulnerabilityHighVulnerability2026-11-13
• ZDI-26-956: KiCad Altium SCHLIB File Parsing Out-Of-Bounds Write Remote Code Execution VulnerabilityHighVulnerability2026-11-13
• ZDI-26-957: KiCad Project Archive File Handling Directory Traversal Remote Code Execution VulnerabilityHighVulnerability2026-11-13
• ZDI-26-958: KiCad Plugin Directory Traversal Remote Code Execution VulnerabilityHighVulnerability2026-11-13